Back to case studies
RoxPay Gateway
Vaultera
Case Study · Infrastructure & Security

A PCI DSS compliant card vault

RoxPay relies on Vaultera for some of its processes for vaulting the cards it holds, thanks to infrastructure compliant with the PCI DSS standard.

PCI DSS
Compliant vault
Token
Cards never in clear
API
API integration
The Solution

Card custody in compliant infrastructure

For some processes, the cards RoxPay holds are kept in the Vaultera vault and stay inside a PCI DSS certified perimeter.

PCI DSS compliant vault

Held cards are stored in certified infrastructure designed for the most sensitive payment data.

Tokenization

RoxPay systems get a token back: the card number does not travel through application flows.

Used in RoxPay processes

Vaultera supports some of our processes that need to securely reuse cards that were already saved.

Results

Card data security without compromise

Relying on specialized infrastructure reduces the exposure of sensitive data.

PCI DSS
Compliance
Security standard required by the card schemes
Token
Protected data
The card number does not pass through application systems
API
Direct integration
Services connected to RoxPay flows through APIs
Integrated technologies

The technology behind the vault

The building blocks that protect the cards RoxPay holds.

Card vault

Encrypted storage of held cards in a certified environment.

Tokenization API

Creating and using tokens in place of card data.

Reduced PCI scope

Fewer systems involved in PCI DSS compliance.

Common Questions

Insights: vaulting and tokenization

It is a secure, encrypted store for card data. Applications use a token instead, which has no value outside the system.

For some of our processes for vaulting held cards we use specialized, PCI DSS compliant infrastructure, so data stays protected at the highest level of security.

Want to integrate secure payments?

Find out how RoxPay protects card data with tokenization and vaulting.